Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue.

oracle CPUOct2026: MySQL Cluster >=9.7.0|<=9.7.4

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.38

oracle CPUOct2026: MySQL Cluster >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Cluster >=8.0.0|<=8.0.50

oracle CPUOct2026: MySQL Cluster >=26.7.0|<=26.7.2

oracle CPUOct2026: MySQL Server >=8.4.0|<=8.4.13

oracle CPUOct2026: MySQL Server >=9.7.0|<=9.7.4

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java,
    Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to
    upgrade to version 0.24.0, which fixes the issue. (CVE-2026-48586)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java,     Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to     upgrade to version 0.24.0, which fixes the issue. (CVE-2026-48586)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
458827	Echo: thrift: security update to 0.19.0-4+e2	Tenable Cloud Security	Echo Local Security Checks	Local	high
458827	Echo: thrift: security update to 0.19.0-4+e2	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
330397	Linux Distros Unpatched Vulnerability : CVE-2026-48586	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-48586

high

Tenable Plugins

Coming Soon

high

high

high